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DETAILED ACTION 

1 . In view of the Pre-Appea! Conference Request filed on 2/20/2008, PROSECUTION 
IS HEREBY REOPENED, A new ground of rejection is set forth below. 

To avoid abandonment of the application, appellant must exercise one of the 
following two options: 

(1) file a reply under 37 CFR 1.111 (if this Office action is non-final) or a reply 
under 37 CFR 1.113 (if this Office action is final); or, 

(2) request reinstatement of the appeal. 

If reinstatement of the appeal is requested, such request must be accompanied 
by a supplemental appeal brief, but no new amendments, affidavits (37 CFR 1.130, 
1 .131 or 1 .132) or other evidence are permitted. See 37 CFR 1 .193(b)(2). 

2. This action is responding to application papers filed on 2-26-2004. Claims 1 - 20 
are pending. Claims 1, 7, 19 are independent. 

Response to Arguments 

3. Applicant's arguments filed 2/20/2008 have been fully considered but they are moot 
due to new grounds of rejection. 

Specification 

4. The specification is objected to as failing to provide proper antecedent basis for 
the claimed subject matter. See 37 CFR 1.75(d)(1) and MPEP § 608.01 (o). Correction 
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of the following is required: Claims 17, 18 are objected as "computer program 
product" is not defined clearly in the specification, so that the meaning of the term in 
the claims is not ascertainable by reference to the specification. 

Claim Rejections - 35 (JSC §112 

5. The following is a quotation of the second paragraph of 35 U.S.C. 112: 

The specification snail conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 

6. Claim 20 is rejected under 35 U.S.C. 112, second paragraph, as being indefinite 
for failing to particularly point out and distinctly claim the subject matter which applicant 
regards as the invention. There is no disclosure of "a third public key and a third 
signature" within the specification or the original claims as amended in claim 20. This 
will be interpreted as a public key and a signature. Appropriate correction required. 

Claim Rejections - 35 USC §103 

7. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art 
are such that the subject matter as a whole would have been obvious at the time the invention was made 
to a person having ordinary skill in the art to which said subject matter pertains. Patentability shall not be 
negatived by the manner in which the invention was made. 

8. Claims 1 - 20 are rejected under 35 U.S.C. 103 (a) as being unpatentable over 
Wong et al. (US Patent No. 5,957,985) in view of England et al. (US Patent No. 
6,330,670). 
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Regarding Claim 1, Wong discloses: 

a method comprising providing software for use by a control unit of a vehicle, (see 
Wong col. 2, lines 21-29; col. 4, line 64 - coi. 5, line 8; col. 7, lines 35-39: software 
for vehicle control unit) Wong does not specifically disclose signing the software 
against falsification, using a secret or private key of a software signature site, and 
checking the signed software for integrity. 
However, England discloses: 

a) before its use by the control unit, signing the software against falsification (see 
England col. 8, lines 34-37: boot block signed by OS manufacturer; col. 11, lines 
47-51 : boot block and all loaded components signed by a trusted source and 
provided with a certificate; sign boot code), using a secret or private key of a 
software signature site (see England col. 8, line 66 - coi. 9, line 2: software 
developer or manufacturer signs software), according to a public-key method; 
(see England coi. 7, line 63 - co!. 8, Sine 14: public key of manufacturer for CPU 
(control entity)) and 

b) checking the signed software for integrity, using a public key complementary to 
the secret key of the software signature site, (see England col. 1 1 , lines 54-59: 
checks signature of a component before loading it; if signature valid then 
component has not been compromised) 

It would have been obvious to one of ordinary skill in the art to modify Wong to 
sign the software against falsification and check the signed software for integrity 
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using a private key as taught by England. One of ordinary skill in the art would have 
been motivated to employ the teachings of England in order to protect the rights of 
the content provider without requiring additional hardware directed at securing 
downloaded content, (see England co!. 3, lines 57-61 : " ... Therefore, there is a 
need in the art for a digital rights management operating system that protects the 
rights of the content provider ... without requiring additional hardware directed at 
securing downloaded content. . . . ") 

England discloses that the boot code is signed (see England col. 8, lines 34-37; cOi. 
1 1 , lines 47-51 : signed boot code). And, England discloses a signed digital 
certificate from the manufacturer of the control unit (CPU) and OS software (see 
England col. 1 1 , lines 47-51 : boot block and all loaded components signed by a 
trusted source and provided with a certificate). This is equivalent to the specification 
on page 6, paragraph [0021], lines 3-6, which discloses that the software signature 
certificate is the generated and signed by the manufacturer of the software. 

England discloses a digital certificate containing an identification number for a 
control entity (see England col. 8, lines 26-28; col. 9, lines 4-10: software identity: 
identify of an authenticated OS). This is equivalent to the specification on page 3, 
paragraph [0010] and paragraph [0012], which discloses that the clearing code 
certificate contains an identifier and the capability to restrict usage to a particular 
control entity. 
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England discloses a trust center or a trusted third party for certificate signing, (see 
England col. 8, line 66 - col. 9, Sine 3: trusted third party) This is equivalent to the 
specification on page 6, paragraph [0022], which discloses a trust center or trusted 
third party that generates certificates. 

Regarding Claim 2, Wong discloses the method according to claim 1 . (see Wong col. 
2, lines 21-29; col. 4, line 64 - col. 5, line 8: vehicle control unit) Wong does not 
specifically disclose generating a software signature certificate, using the public key of 
the software signature site and a secret key of a control entity. However, England 
discloses wherein generating a software signature certificate using the public key of the 
software signature site and a secret key of a control entity of a trust center, according to 
a public-key method, (see England col. 7, Sine 63 - col. 8, line 14: signed manufacturer 
certificate; usage of public/private key pair; key pair placed onto CPU (control entity); 
certificate contains manufacturer's public key; ) 

it would have been obvious to one of ordinary skill in the art to modify Wong 
generate a software signature certificate using the public key and a secret key of a 
control entity of a trust center as taught by England. One of ordinary skill in the art 
would have been motivated to employ the teachings of England in order to protect the 
rights of the content provider without requiring additional hardware directed at securing 
downloaded content, (see England col. 3, lines 57-61) 

Regarding Claim 3, Wong discloses the method according to claim 1 . (see Wong col. 
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2, lines 21-29; col. 4, line 64 - col. 5, line 8: vehicle control unit) Wong does not 
specifically disclose a control entity certificate and a trust center certificate is generated 
according to a public-key method by using the secret key of the control entity. 
However, England discloses wherein one of a control entity certificate and a trust center 
certificate is generated according to a public-key method by using the secret key of the 
control entity, (see England col. 7, Sine 63 - col. 8, line 14: manufacturer (CPU, control 
entity) certificate generated; manufacturer public/private key pair usage) 

It would have been obvious to one of ordinary skill in the art to modify Wong for a 
control entity certificate and a trust center certificate to be generated according to a 
public-key method as taught by England. One of ordinary skill in the art would have 
been motivated to employ the teachings of England in order to protect the rights of the 
content provider without requiring additional hardware directed at securing downloaded 
content, (see England col. 3, lines 57-61) 

Regarding Claim 4, Wong discloses the method according to claim 1 . (see Wong col. 
2, lines 21-29; col. 4, line 64 - col. 5, line 8: vehicle control unit) Wong does not 
specifically disclose clearing code data are signed using a secret key of a clearing code 
site according to a public key method. However, England discloses wherein clearing 
code data are signed using a secret key of a clearing code site according to a public key 
method, (see England col. 8, lines 26-37; col. 9, lines 4-10: software identify (clearing 
code site identifier); uniquely determines OS identity signed by manufacturer; col. 8, 
lines 7-12: public/private key pair usage) 
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It would have been obvious to one of ordinary skiii in the art to modify Wong for 
clearing code data to be signed using a secret key of a clearing code site as taught by 
England. One of ordinary skill in the art would have been motivated to employ the 
teachings of England in order to protect the rights of the content provider without 
requiring additional hardware directed at securing downloaded content, (see England 
col. 3, lines 57-61) 

Regarding Claim 5, Wong discloses the method according to claim 2. (see Wong col. 
2, lines 21-29; col. 4, line 64 - col. 5, line 8: control unit for vehicle) Wong does not 
specifically disclose a clearing code site signature certificate is generated using the 
secret key of the control entity of the trust center according to a public-key method. 
However, England discloses wherein a clearing code site signature certificate is 
generated using the secret key of the control entity of the trust center according to a 
public-key method, (see England col. 8, lines 26-37; col. 9, lines 4-10: software identify 
(clearing code site identifier); uniquely determines OS identity signed by manufacturer; 
col. 8, lines 7-12: public/private key pair usage) 

It would have been obvious to one of ordinary skill in the art to modify Wong for 
signing the software against falsification, and checking the signed software for integrity 
as taught by England. One of ordinary skill in the art would have been motivated to 
employ the teachings of England in order to protect the rights of the content provider 
without requiring additional hardware directed at securing downloaded content, (see 
England col. 3, lines 57-61) 
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Regarding Claim 6, Wong discloses the method according to claim 3. (see Wong col. 
2, lines 21-29; col. 4, line 64 - col. 5, line 8: control unit for vehicle) Wong does not 
specifically disclose the trust center certificate is protected against falsification and 
exchange, in a protected memory area in the control unit. However, England discloses 
wherein the trust center certificate is protected against falsification and exchange, in a 
protected memory area in the control unit, (see England col. 8, lines 26-28; col. 9, lines 
4-10: internal software identity register; coi. 8, line 66 - col. 9, line 3: trusted third party 
to digitally sign all components) 

It would have been obvious to one of ordinary skill in the art to modify Wong the 
trust center certificate is protected against falsification and exchange, in a protected 
memory area as taught by England. One of ordinary skill in the art would have been 
motivated to employ the teachings of England in order to protect the rights of the 
content provider without requiring additional hardware directed at securing downloaded 
content, (see England col. 3, lines 57-61) 

Regarding Claim 7, Wong discloses a method of providing software for use by a 

control unit of a vehicle, said method comprising: 

a control unit of a vehicle, (see Wong col. 2, lines 21-29; coi. 7, lines 32-38; col. 4, 
line 64 - col. 5, line 8: control unit for vehicle, control unit, boot image) Wong does 
not specifically disclose the clearing code site signature certificate, the software 
signature certificate, the clearing code data and their signature as well as the 
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software and its signature are stored in the control unit. 

However, England discloses: 

a) before its use by the control unit, signing the software against falsification (see 
England col. 8, lines 34-37: boot block signed by OS manufacturer; col. 1 1 , lines 
47-51 : boot block and all loaded components signed by a trusted source and 
provided with a certificate; sign boot code), using a secret or private key of a 
software signature site (see England col. 8, line 66 - coi. 9, line 2: software 
developer or manufacturer signs software), according to a public-key method; 
(see England col. 1, line 63 - coi. 8, line 14: public key of manufacturer for CPU 
(control entity)) and 

b) checking the signed software for integrity, using a public key complementary to 
the secret key of the software signature site, (see England col. 1 1 , lines 54-59: 
checks signature of a component before loading it; if signature valid then 
component has not been compromised) 

c) wherein a clearing code site signature certificate, a software signature certificate, 
the clearing code data and their signature as well as the software and its 
signature are stored in the control unit, (see England coi. 7, lines 50-54: storage 
of keys, certificates; manufacture equips the CPU with a pair of public and private 
keys that is unique to CPU; certificate contains public key) 

It would have been obvious to one of ordinary skill in the art to modify Wong for 
signing the software against falsification, and checking the signed software for 
integrity as taught by England. One of ordinary skill in the art would have been 
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motivated to employ the teachings of England in order to protect the rights of the 
content provider without requiring additional hardware directed at securing 
downloaded content, (see England col. 3, lines 57-61 ) 

Regarding Claim 8, Wong discloses the method according to claim 2. (see Wong col. 
2, lines 21-29; col. 4, line 64 - col. 5, line 8: control unit for vehicle) Wong does not 
specifically disclose software signature certificate includes at least one validity 
restriction. However, England discloses wherein the software signature certificate 
includes at least one validity restriction, (see England col. 8, lines 26-28; col. 9, lines 4- 
10: internal software identity register (validity restriction); col. 8, line 66 - col. 9, line 3: 
trusted third party to digitally sign all components) 

It would have been obvious to one of ordinary skill in the art to modify Wong that 
the software signature certificate includes at least one validity restriction as taught by 
England. One of ordinary skill in the art would have been motivated to employ the 
teachings of England in order to protect the rights of the content provider without 
requiring additional hardware directed at securing downloaded content, (see England 
col. 3, lines 57-61) 

Regarding Claim 9, Wong discloses the method according to claim 5. (see Wong col. 
2, lines 21-29; col. 4, line 64 - col. 5, line 8: control unit for vehicle) Wong does not 
specifically disclose the clearing code site signature certificate includes at least one 
validity restriction, a restriction to a particular control unit which is designated by means 
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of an identification number stored in the control unit in an invariable manner, and a 
restriction to a vehicle identification number of a particular vehicle. However, England 
discloses wherein the clearing code site signature certificate includes at least one 
validity restriction, a restriction to a particular control unit which is designated by means 
of an identification number stored in the control unit in an invariable manner, and a 
restriction to a vehicle identification number of a particular vehicle, (see England col. 8, 
lines 26-28; col. 9, lines 4-10: interna! software identity register (validity restriction): 
uniquely determines the OS; col. 8, Sine 66 - col. 9, line 3: trusted third party to digitally 
sign ail components) 

It would have been obvious to one of ordinary skill in the art to modify Wong for 
restriction to a particular control unit designated by an identification number as taught by 
England. One of ordinary skill in the art would have been motivated to employ the 
teachings of England in order to protect the rights of the content provider without 
requiring additional hardware directed at securing downloaded content, (see England 
col. 3, lines 57-61) 

Regarding Claim 10, Wong discloses the method according to claim 2. (see Wong col. 
2, lines 21-29; col. 4, line 64 - col. 5, line 8: control unit for vehicle) Wong does not 
specifically disclose the software signature certificate is checked for integrity according 
to a public-key method, using a public key of the trust center. However, England 
discloses wherein the software signature certificate is checked for integrity according to 
a public-key method, using a public key of the trust center, (see England col. 8, line 66 
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- col. 9, lines 3: ail components digitally signed by a trusted third party; col. 8, lines 7-12: 
public/private usage for manufacturer) 

It would have been obvious to one of ordinary ski!! in the art to modify Wong for 
signing the software against falsification, and checking the signed software for integrity 
as taught by England. One of ordinary skiS! in the art would have been motivated to 
employ the teachings of England in order to protect the rights of the content provider 
without requiring additional hardware directed at securing downloaded content, (see 
England col. 3, lines 57-61) 

Regarding Claim 11, Wong discloses the method according to claim 2. (see Wong col. 
2, lines 21-29; col. 4, line 64 - col. 5, line 8: control unit for vehicle) Wong does not 
specifically disclose the signed software is checked for integrity according to a public 
key method, using the public key of the software signature site contained in the software 
signature certificate. However, England discloses wherein the signed software is 
checked for integrity according to a public key method, using the public key of the 
software signature site contained in the software signature certificate, (see England col. 
1 1 , lines 54-59: checks signature of a component before loading if; if signature valid 
then component has not been compromised; col. 8, lines 7-12: public/private key pair 
usage; checked for validity) 

It would have been obvious to one of ordinary skill in the art to modify Wong for 
checking the signed software for integrity as taught by England. One of ordinary skill in 
the art would have been motivated to employ the teachings of England in order to 
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protect the rights of the content provider without requiring additional hardware directed 
at securing downloaded content, (see England col. 3, lines 57-61 ) 

Regarding Claim 12, Wong discloses the method according to claim 5. (see Wong 
col. 2, lines 21-29; col. 4, line 64 - coi. 5, line 8: control unit for vehicle) Wong does not 
specifically disclose the clearing code site signature certificate is checked for integrity 
according to a public key method, using a public key of the trust center. However, 
England discloses wherein the clearing code site signature certificate is checked for 
integrity according to a public key method, using a public key of the trust center, (see 
England col. 1 1 , lines 54-59: checks signature of a component before loading it; if 
signature valid then component has not been compromised; col. 8, lines 7-12: 
public/private key pair usage; checked for validity) 

It would have been obvious to one of ordinary skill in the art to modify Wong to 
check for integrity according to a public key method, using a public key of the trust 
center as taught by England. One of ordinary skill in the art would have been 
motivated to employ the teachings of England in order to protect the rights of the 
content provider without requiring additional hardware directed at securing downloaded 
content, (see England coi. 3, lines 57-61) 

Regarding Claim 13, Wong discloses the method according to claim 4. (see Wong col. 
2, lines 21-29; coi. 4, line 64 - col. 5, line 8: control unit for vehicle) Wong does not 
specifically disclose the signed clearing code data are checked for integrity according to 
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a public key method, using a public key of the clearing code site contained in the 
clearing code site signature certificate. However, England discloses wherein the signed 
clearing code data are checked for integrity according to a public key method, using a 
public key of the clearing code site contained in the clearing code site signature 
certificate, (see England col. 11, lines 54-59: checks signature of a component before 
loading it; if signature valid then component has not been compromised; col. 8, lines 7- 
12: public/private key pair usage; checked for validity) 

It would have been obvious to one of ordinary skill in the art to modify Wong for 
signing the software against falsification, and checking the signed software for integrity 
as taught by England. One of ordinary skiSi in the art would have been motivated to 
employ the teachings of England in order to protect the rights of the content provider 
without requiring additional hardware directed at securing downloaded content, (see 
England col. 3, lines 57-61) 

Regarding Claim 14, Wong discloses the method according to claim 1, wherein the 
control unit is equipped with a sequence-controlled microprocessor that implements one 
of the above-described methods, (see Wong col. 2, lines 21-29: vehicle processor 
(microprocessor)) 

Regarding Claim 15, Wong discloses a control unit for a motor vehicle, which 
implements a method according to claim 1. (see Wong col. 2, lines 21-29; col. 4, line 64 
- col. 5, line 8; col. 7, lines 35-39: control unit, vehicle) 
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Regarding Claim 16, Wong discloses a data processing system for a motor vehicle, 
which implements a method according to claim 1 . (see Wong col. 4, line 64 - col. 5, line 
8; col. 7, lines 35-39: computer, data processing system) 

Regarding Claim 17, Wong discloses a computer program product sequence control of 
a data processing system of a motor vehicle or motorcycle, which implements the 
method according to claim 1 . (see Wong col. 4, line 64 - col. 5, line 8; col. 7, lines 35- 
39: computer, data processing system, vehicle) 

Regarding Claim 18, Wong discloses a data carrier, comprising a computer program 
product according to claim 17. (see Wong coi. 4, line 64 - col. 5, line 8; col. 7, lines 35- 
39: software (computer program product) implementation means) 

Regarding Claim 19, Wong discloses a method of providing software for use by a 
control unit of a vehicle, said method comprising: 

the control unit (see Wong coi. 7, lines 32-38: control unit, vehicle) 

Wong does not specifically disclose whereby storing certificates, receiving signed 

software, checking signed software. 

However, England discloses: 

a) storing, a software signature certificate; receiving, signed software; (see England 
col. 7, lines 50-54: storage of keys, certificates; manufacture equips the CPU with 
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a pair of public and private keys that is unique to CPU) 

b) checking, whether the software signature certificate has been changed or 
manipulated; (see England col. 1 1 , lines 54-59: checks signature of a component 
before loading it; if signature valid then component has not been compromised) 

c) checking, whether the signed software has been changed or manipulated, (see 
England col. 1 1 , lines 54-59: checks signature of a component before loading it; 
if signature valid then component has not been compromised) 

It would have been obvious to one of ordinary skill in the art to modify Wong for 
signing the software against falsification, and checking the signed software for 
integrity as taught by England. One of ordinary skill in the art would have been 
motivated to employ the teachings of England in order to protect the rights of the 
content provider without requiring additional hardware directed at securing 
downloaded content, (see England coi. 3, lines 57-61 ) 

Regarding Claim 20, Wong discloses the method of claim 19, further comprising: 
the control unit (see Wong col. 7, lines 32-38: control unit, vehicle) 
Wong does not specifically disclose whereby storing certificates and keys associated 
with certificates. 

However, England discloses: 

a) storing, a trust center certificate that includes a public key and a signature 
generated using a secret key of a trust center; (see England coi. 7, lines 50-54: 
storage of keys, certificates; manufacture equips the CPU with a pair of public 
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and private keys that is unique to CPU) and 

b) storing, a clearing code site signature certificate that includes a second public 
key and a second signature, (see England col. 7, lines 50-54: storage of keys, 
certificates; manufacture equips the CPU with a pair of public and private keys 
that is unique to CPU) 

c) wherein the software signature certificate includes a third public key and a third 
signature, (see England col. 7, lines 50-54: storage of keys, certificates; 
manufacture equips the CPU with a pair of public and private keys that is unique 
to CPU) 

It would have been obvious to one of ordinary skill in the art to modify Wong for 
signing the software against falsification, and checking the signed software for 
integrity as taught by England. One of ordinary skill in the art would have been 
motivated to employ the teachings of England in order to protect the rights of the 
content provider without requiring additional hardware directed at securing 
downloaded content, (see England col. 3, lines 57-61 ) 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Carlton V. Johnson whose telephone number is 571- 
270-1032. The examiner can normally be reached on Monday thru Friday , 8:00 - 
5:00PM EST. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
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supervisor, Nasser Moazzami can be reached on 571-272-4195. The fax phone 
number for the organization where this application or proceeding is assigned is 571- 
273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

Carlton V. Johnson 

Examiner 

Art Unit 2136 



CVJ 

April 28, 2008 



/Brandon S Hoffman/ 

Primary Examiner, Art Unit 2136 



